Azure Data Factory Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, cass-operator, helm-operator, metrics-server, cloud-provider-azure, kots, datadog-agent, flux-helm-controller, cluster-api-aws-controller, hubble, cert-manager-istio-csr, cluster-autoscaler, kapp-controller, kwok, kyverno-notation-aws,...

EUVD-2026-62942

In versions below 2.5.3 of the Azure AD Graph app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive password by invoking the reset password action, because the action's temppassword parameter is not masked and is shown in cleartext in the user...

PT-2026-79207

Name of the Vulnerable Software and Affected Versions Azure SQL Database affected versions not specified Description Improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network. Recommendations At t...

PT-2026-79216

Name of the Vulnerable Software and Affected Versions Microsoft Copilot in Azure affected versions not specified Description Server-side request forgery SSRF allows an authorized attacker to disclose information over a network. SSRF is a flaw where a server is tricked into making requests to an...

CVE-2026-69855: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network...

CVE-2026-65816: Use of Incorrectly-Resolved Name or Reference

Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69543: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...

PT-2026-79211

Name of the Vulnerable Software and Affected Versions Azure Virtual Machines affected versions not specified Description Server-side request forgery SSRF, a flaw where an attacker induces a server-side application to make requests to an unintended location, allows an authorized attacker to elevat...

PT-2026-79212

Name of the Vulnerable Software and Affected Versions Azure Arc affected versions not specified Description Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that...

CVE-2026-69519: Observable Response Discrepancy

Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a network...

PT-2026-79195

Name of the Vulnerable Software and Affected Versions Azure Data Factory affected versions not specified Description Improper verification of cryptographic signatures allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about...

PT-2026-79201

Name of the Vulnerable Software and Affected Versions Azure Arc affected versions not specified Description An issue involving the use of an incorrectly-resolved name or reference allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...

CVE-2026-61625: Improper Limitation of a Pathname to a Restricted Directory

VictoriaMetrics is a scalable solution for monitoring and managing time series data. Prior to 1.122.25, 1.136.12, and 1.146.0, vmrestore does not validate backup part path components before using lib/backup/actions/restore.go and lib/backup/fslocal/fslocal.go to write restored data below...

PT-2026-79206

Name of the Vulnerable Software and Affected Versions Azure SQL Database affected versions not specified Description An issue involving improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network...

CVE-2026-65770: Improper Neutralization of Argument Delimiters in a Command

Improper neutralization of argument delimiters in a command 'argument injection' in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network...

CVE-2026-69555: Incorrect Authorization

Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69419: Integer Overflow or Wraparound

Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network...

CVE-2026-69400: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-66800: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Azure Data Factory allows an unauthorized attacker to disclose information over a network...